Free 312-49v11 Exam Braindumps
Computer Hacking Forensic Investigator Questions 41–45 (page: 10)

Updated On: 10-Feb-2026

Identify the term that refers to individuals who, by virtue of their knowledge and expertise, express an independent opinion on a matter related to a case based on the information that is provided.

  1. Expert Witness
  2. Evidence Examiner
  3. Forensic Examiner
  4. Defense Witness

Answer(s): A


Reference:

https://academyofexperts.org/users-of-experts/what-is-an-expert-witness/



While collecting Active Transaction Logs using SQL Server Management Studio, the query Select * from
::fn_dblog(NULL, NULL) displays the active portion of the transaction log file. Here, assigning NULL values implies?

  1. Start and end points for log sequence numbers are specified
  2. Start and end points for log files are not specified
  3. Start and end points for log files are specified
  4. Start and end points for log sequence numbers are not specified

Answer(s): B


Reference:

https://logicalread.com/sql-server-dbcc-log-command-tl01/#.YUnuGGYzYo8



An attacker successfully gained access to a remote Windows system and plans to install persistent backdoors on it. Before that, to avoid getting detected in future, he wants to cover his tracks by disabling the last-accessed timestamps of the machine.
What would he do to achieve this?

  1. Set the registry value of HKLM\SYSTEM\CurrentControlSet\Control\FileSystem \NtfsDisableLastAccessUpdate to 0
  2. Run the command fsutil behavior set disablelastaccess 0
  3. Set the registry value of HKLM\SYSTEM\CurrentControlSet\Control\FileSystem \NtfsDisableLastAccessUpdate to 1
  4. Run the command fsutil behavior set enablelastaccess 0

Answer(s): C


Reference:

https://www.techrepublic.com/article/tech-tip-disable-the-last-access-update/



POP3 is an Internet protocol, which is used to retrieve emails from a mail server. Through which port does an email client connect with a POP3 server?

  1. 110
  2. 143
  3. 25
  4. 993

Answer(s): A


Reference:

https://www.ionos.com/digitalguide/e-mail/technical-matters/imap-or-pop3-which-e-mail-protocol-to- choose/#:~:text=Each%20message%20can%20only%20be,connected%2C%20they%20communicate%20via %20commands



James, a hacker, identifies a vulnerability in a website. To exploit the vulnerability, he visits the login page and notes down the session ID that is created. He appends this session ID to the login URL and shares the link with a victim. Once the victim logs into the website using the shared URL, James reloads the webpage (containing the URL with the session ID appended) and now, he can browse the active session of the victim.
Which attack did James successfully execute?

  1. Cross Site Request Forgery
  2. Cookie Tampering
  3. Parameter Tampering
  4. Session Fixation Attack

Answer(s): D


Reference:

https://owasp.org/www-community/attacks/Session_fixation#:~:text=Session%20Fixation%20is% 20an%20attack,specifically%20the%20vulnerable%20web%20application



Viewing page 10 of 31
Viewing questions 46 - 50 out of 452 questions


Post your Comments and Discuss EC-Council 312-49v11 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!